AMENDMENTS TO THE CLAIMS 



1-13. (Canceled) 

14. (Currently Amended) A license information management apparatus which 

manages license information that includes (i) an encrypted content key for decrypting encrypted 
digital content and (ii) content reproduction condition information indicating a range in which 
the digital content can be used, said apparatus comprising: 

a storage unit not having tamper resistance , th e storag e unit b e ing configur e d to stor e 
encrypted informati ea; and 

a tamper resistance module which encrypts at least the license information, among the 
license information and a correspondence table for managing an update history of the license 
information, and which stores the encrypted license i nformation into the storage unit, 

wherein the tamper resistance module includes: 

a digital signature management unit configured to (i) generate a hash value of the 
encrypted license information before the encrypted license information is stored into the storage 
unit, and store h eld-the generated hash value into a built-in memory , and (ii) read v e rify validity 
of th e e ncrypt e d information by r e ading t he encrypted license i nformation stored in the storage 
unit, generate generating a hash value of the read encrypted license information, and compare 
comparing the generatedt he hash value of the encrypted information before the encrypted 
information is stor e d into th e storag e uni t stored in the built-in memory with the generated hash 
value of the read encrypted license information, with a result of t he comparison being used to 
verify vahdity of the read encrypted license information, the validity i ndicating that the read 
encrypted license information has not been tampered with; 
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an encrypting and decrj^ting unit configured to (i) encrypt the license information and 
store the encrypted hcense information in the storage unit, and (ii) read the encrypted license 
information from the storage unit and decrypt the read encrypted hcense information; and 

a control unit configured to decrypt the encrypted content key included in the Hcense 
information decrj^ted by the encrypting and decrypting unit, output the decrypted content key 
outside of the hcense information management apparatus, update the content reproduction 
condition information included in the decrypted license information, and cause the encrypting 
and decrypting unit to encrypt the updated license information and to overwrite the encrypted 
license information stored in the storage unit with the encrypted updated hcense information so 
as aad-to store the encrypted updated license information into the storage unit, when the digital 
content is used and only when the digital signature management unit yerifies the yalidit y of the 
read encrypted hcense information, and 

wherein the decrypted content key outputted by the control unit is received and used for 
decrypting the digital content by a content decrypting unit that is connected to the hcense 
information management apparatus . 

15. (Currently Amended) The license information management apparatus according to 

Claim 14, 

wherein the license information further includes a digital signature for (i) the encrypted 
content key and (ii) the content reproduction condition information, 

wherein the encrypting and decrypting unit is configured to encrypt each of a plurality of 
pieces of license information, and store each piece of encrypted hcense information in the 
storage unit, and 
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wherein the digital signature management unit is configured to, for a set of all the pieces 
of encrypted license information, (i) generate a hash value of the digital signature included in the 
encrypted license information before the encrypted license information is stored into the storage 
unit, and store h eld-the generated hash value into the built-in memory , and (ii) read v e rify th e 
validity of the encr3^ted license information by reading t he encrypted license information stored 
in the storage unit, generate e eneratine a hash value of the digital signature included in the read 
encrypted license information, and compare comparing th e g e n e rat e dt he hash value of th e digital 
signature includ e d in th e e ncrypt e d lic e ns e information b e for e th e e ncrypt e d lic e ns e information 
is stored into the storage unit stored in the built-in memory with the generated hash value of the 
digital signature included in the read encrypted license information, with a resuh of the 
comparison being used to verify validity of the read encrypted license information, the validity 
indicating that the read encrypted Ucense information has not been tampered with. 

16. (Currently Amended) The license information management apparatus according to 

Claim 14, 

wherein the encrypting and decrypting unit is further configured to (i) encrypt the 
correspondence table and store the encrypted correspondence table in the storage unit, and (ii) 
read the stored correspondence table from the storage unit and decrypt the read correspondence 
table, the correspondence table being a table in which identification information identifying the 
license information is stored in association with information indicating an update history of the 
license information for each of a plurality of pieces of license information stored in the storage 
unit, and 



4 



wherein the digital signature management unit is configured to (i) generate a hash value 
of the encrypted correspondence table before the encrypted correspondence table is stored into 
the storage unit, and store h eld-the generated hash valu e into the built-in memory, and (ii) read 
verify vaUdity of the encrypt e d corr e spond e nc e tabl e by r e ading t he encrypted correspondence 
table stored in the storage unit, generate g eneratine -a hash value of the read encrypted 
correspondence table, and compare comparing the eeneratedt he hash value of the encrypted 
correspondence tabl e b e for e th e e ncrypt e d corr e spond e nc e tabl e is stor e d into th e storag e unit 
stored in the built-in memory w ith the generated hash value of the read encrypted 
correspondence table, with a resuh of the comparison being used to verify v alidity of the read 
encrypted correspondence table, the validity i ndicating that the read encrypted correspondence 
table has not been tampered with. 

17. (Currently Amended) The license information management apparatus according to 
Claim 16, 

wherein corresponding information indicating the update history indicates the number of 
updates or a random number, the corresponding information being included in the 
correspondence table decrypted by the encrypting and decrypting unit, and 

wherein the control unit is further configured to update the corresponding information of 
the correspondence table indicating the number of updates or the random number, when the 
license information is updated, and cause the encrypting and decrypting unit to encrypt the 
updated correspondence table and to overwrite the encrypted correspondence table stored in the 
storage unit with the encrypted updated correspondence table so as to ^ ^d-store the encrypted 
updated correspondence table into the storage unit. 
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18. (Currently Amended) The license information management apparatiis according to 

Claim 14, 

wherein the contiol unit is further configured to determine whether or not the license 
information is new, and cause the encrypting and decrypting unit to encrypt the license 

information, which is determined to be new, and to overwrite the encrypted license information 
stored in the storage unit with the new encrypted license information so as to a nd-store th e new 
encrypted license information into the storage unit. 

19. (Previously Presented) The license information management apparatus according 
to Claim 14, 

wherein the tamper resistance module includes an IC card, and 
wherein the storage unit includes a flash memory. 

20. (Currently Amended) A license information management method for managing, by 
using a tamper resistance module, license information that includes (i) an encrj^ted content key 
for decrypting encrypted digital content and (ii) content reproduction condition information 
indicating a range in which the digital content can be used, the tamper resistance module 
comprising a digital signature management unit, an encrypting and decrypting unit, and a control 
unit, and the tamper resistance module b eing capable of writing and reading encrypted 
information to a storage unit storing th e e ncrypt e d information and having no tamper resistance, 
encrypting at least the license information, among the license information and a correspondence 
table for managing an update history of the license information, and storing the encrypted Ucense 
information into the storage unit, said method comprising: 
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a digital signature management step , being performed by the digital signature 
management unit, of (i) generating and holding a hash value of the encrypted license information 
before the encrypted license information is stored into the storage unit, and storing the generated 
hash value into a built-in memory, (ii^ v e rifying vahdity of th e e ncrypt e d information by reading 
the encrypted hcense information stored in the storage unit, generating a hash value of the read 
encrypted license information, and comparing the generatedt he hash value of the encrypt e d 
information before th e encrypt e d information is stor e d into th e storag e uni t stored in the built-in 
memory with the generated hash value of the read encrypted license i nformation, with a result of 
the comparison being used to verify validity of the read encrypted license information, the 
validity indicating that the read encrypted license information has not been tampered with; 

an encrypting and decrypting step , being performed by the encrypting and decrypting 
imit. of (i) encrypting the license information and storing the encrypted hcense information in the 
storage unit, and (ii) reading the encrypted license information from the storage unit and 
decrypting the read encrypted license information; and 

a control step , being performed by the control unit, of decrypting the encrypted content 
key included in the license information decrypted in the encrypting and decrypting step, 
outputting the decrypted content key outside a license information management apparatus, 
updating the content reproduction condition information included in the decrypted license 
information, and causing the updated license information to be encrypted in the encrypting and 
decrypting step and the encrypted license information stored in the storage unit t o be overwritten 
with the encrypted updated license information so as to store the encrypted updated license 
information and stor e d into the storage unit^ 
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wherein the decrypted content key outputted in said control step is received and used for 
decrypting the digital content by a content decrypting unit that is connected to the license 
information management apparatus . 

21. (Currently Amended) A computer executable program embodied on a computer- 
readable medium encoded with a program haying computer-executable instructions, the program 
being for use in a license information management apparatus which manages, by using a tamper 
resistance module, license information that includes (i) an encrypted content key for decrypting 
encrypted digital content and (ii) content reproduction condition information indicating a range 
in which the digital content can be used, the tamper resistance module comprising a digital 
signature management unit, an encrypting and decrypting unit, and a control unit, and the tamper 
resistance module b eing capable of writing and reading encrypted information to a storage unit 
storing the encrypted information and haying no tamper resistance, encrypting at least the license 
information, among the license information and a correspondence table for managing an update 
history of the license information, and storing the encrypted license information into the storage 
unit, wherein execution of the computer-executable instructions said program b y a computer 
causing a causes the computer to execute a method comprising: 

a digital signature management step , being performed by the digital signature 
management unit, of (i) generating and holding a hash yalue of the encrypted license information 
before the encrypted license information is stored into the storage unit, and storing the generated 
hash yalue into a built-in memory, (ii) y e rifying validity of th e e ncrj i ^t e d information by reading 
the encrypted hcense information stored in the storage unit, generating a hash value of the read 
encrypted license information, and comparing the generatedt he hash yalue of the encr3^ted 
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information before the encng^ted information is stored into the storage unit stored in the built-in 
memory with the generated hash value of the read encrypted license information, with a result of 
the comparison being used to verify v alidity of the read encrypted license information, the 
validity i ndicating that the read encrypted license information has not been tampered with; 

an encrjqDting and decrj^ting step , being performed by the encrypting and decrypting 
unit, of (i) encrypting the license information and storing the encrypted license information in the 
storage unit, and (ii) reading the encrypted license information from the storage unit and 
decrypting the read encrypted license information; and 

a control step , being performed by the control unit, of decrypting the encrypted content 
key included in the license information decrypted in the encrypting and decrypting step, 
outputting the decrypted content key outside a license information management apparatus, 
updating the content reproduction condition information included in the decrypted license 
information, and causing the updated license information to be encrypted in the encrypting and 
decrypting step and the encrypted license information stored in the storage unit to be overwritten 
with the encrypted updated license information so as to store the encrypted updated license 
information and stor e d into the storage unit^ 

wherein the decrypted content key outputted in said control step is received and used for 
decrypting the digital content by a content decrypting unit that is connected to the license 
information management apparatus . 



9 



